33 



REF ID : A2 43598 6 



u 



cj o E YES MJLY 




AFSAC s 



19 June 1950 



MEMORANDUM FOE MEMBERS OF AFSAC ; 

Subjects Replacement of the Present Combined 

Cipher Machine (GCM)o 

!-> The subject paper is enclosed herewith and 
has been placed on the Agenda for consideration at th© 
Fifteenth Meeting to be held on 19 June 1950 , 




Secretariats, AFSAC o 



AFSAC s 13/40 



Declassified and approved for release bv NSA on 09-20-2013 pursuant to E.Q. 13529 






4SS4JBL1 



TOP SECRET 





REPORT BY THE ARMED FORCES SgGURITrjg^ 'f J^U HCIL 
VIA TEE JOINT COM^NIOATIQMS^ELBCTSOKI O SjjOlfdl'TTBE 

to the 



JOINT CHIEFS OT STAFF 



REPLACEMENT Off THE PRESENT COMBINED CI P HER MICHIMS _ (COM) 
Reference s J 0 CoS 0 20?4 Series 

THE PROBLEM 

lo To draft* for approval of the Joint Chiefs of Staff* a reply 
to the memorandum by the Representatives of the British Chiefs of 
Staff* RDG 1/46 dated 14 February 1950 (JCS 2074/35 regarding the 
feasibility of constructing an adaptor for U<,S 0 use which will per- 
mit intercommunication with the contemplated new British cipher 
mac hine 0 

FACTS BEARING QN THE PROBLEM AN B DISCUSS ION 

2o See Enclosure ,f B” « 

C PNC LUSX QNS 

3o It is concluded that: 

a.o While there is no doubt that the British are aware of the 
basic important ECM principles s and propose to incorporate them In 
a new British cipher machine s they apparently lack considerable de- 
tailed knowledge concerning our specific application of those 
principles in the ECM c 

bo To adapt the proposed British cipher machine to use for 
UoSo-TJoKo combined communications appears to be feasible* provided 
the U , 8 0 reveals to the British the detailed information concerning 
the ECM which they now lack, and would require to produce a machine 
practically equivalent to our ECM c 
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The replacement for the CCM S to be agreed upon by the UoSo° 
UoKop may'.later P especially in wartime 8 have to be used also by allied 
British Dominions*, particularly Canada,, and possibly by other allied 
countrieso 

d Q The UoSog as a matter of policy e should not disclose to any 
foreign country the complete details of the ECM, even though tech- 
nical considerations might favor the use of the ECM for combined 
communications, 

e<> While the proposed British cipher machine would be adequately 
secure for highest-level communications*, developments refinement and 
procurement of such a machine by the agreed date for replacement 
(1 January 1955) is extremely doubtful, 

fo The UoS, has current need*, without considering combined 
needs s for more than one cipher machine afrording adequate security 
for highest level communications 0 . 

The UoSq should propose to disclose to the British experts 
a working model of the 7-rotor BCM for consideration as replacement 
for the present CCM„ in lieu of further consideration of adapting 
the contemplated British machine for combined U 0 S 0 <=>UoKo use D 

h» The TJoSo should also disclose to British experts a working 

V 

model of the PCM when available, 

,io In addition to a replacement for the present CCM p the U 0 S,> 
and British Navies have an urgent requirement in combined communis 
cations for a secure small cipher machine - particularly for sub- 
marines*, certain surface ships*, and for large fast merchant ships, 
jU Comparable British and UoS, cipher machine^, whenever prac- 
ticable*, should use physically interchangeable rotorso 

RECOMMENDATIONS 
4o It is recommended that? 

&o No further consideration be given to using the ECM prin- 
ciple for combined communicationso 
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b 0 7-rotor BCM and lightweight versions, PCM t working models 
be disclosed in 'Washington by the TJoSo to the British for consi= 
deration as the replacement for the CCM 0 

£o The U 0 So reply to the British be as set forth in 
Enclosure ™A w o 
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ME?.?ORA£jDtJK FOK THB REIRUSBKTaTIVBS OF THE BRITISH CHIEFS OF STAFF 

lo Th© Uo S. Chiefs of Staff have had a thorough study made 
of th© drawings of the proposed new British oipher machine which 
w@r© submitted as an enclosure to RDC 1/48 of 12 April 1950 o It 
has thus been ascertained that the proposed new British machine 
should be secure for highest level oomrauni oat ions, and that a 
Uo So oipher machine probably could be adapted to permit inter** 
eommunicationo However, a working model would be required in 
order to determine the practical feasibility of such adaptation 

2o Because of the time which experience indicates is re° 
qulred to develop, refine*, and procure a new oipher machine, such 
as th© UoKo has proposed, and because of important technical and 
policy considerations, instead of further considering the adap° 
tation of th© proposed new British machine, the Uo S c Chiefs of 
Staff propose that as the long-term solution of a replacement 
for th© present combined cipher machine (CCi?) s consideration be 
given to the 7°rotor B0M o 

3° The Ud So now has a working model of a 7-rotor BCM 
available for examination in Washington by British oipher maohine 
experts, if the British Chiefs of Staff are willing to consider 
th© adoption of such a machine as replacement for the C0M o The 
Uo So expects also to have available for examination a smaller 
lighter-weight working model of the 7-rotor BCM (termed the PCM) 
before the end of calendar year 1950 o This machine has been 
developed primarily for future Naval use 0 The 7- rotor BCM/PCM 
can readily be adapted to intercommunicate with the present CCM 0 

4o Th© Uo So 7-rotor BCM/PCM proposal for combined U 0 S 0 -U.Ko 
communications has taken into consideration the necessity not only 
for providing security for highest-level command combined communis 







ih 






REF JEDj A2 4 3 6 



£ Ctafctr 






BYES ONLY (UNTIL ?OR’.?ARDKD) 



cations, but also for communications in combined operating forces 0 
The TJ. S. Chiefs of Staff concur with the British Chiefs of Staff 
in wishing to avoid having numerous operating units (especially 
8 hips } encumbered with more than one type of cipher machine 0 



5o The security to be afforded by the 7~rotor BOW (PGM) 
is considered to be of about the same high order as the U Q S 0 ECM 
and the proposed new British machine o 

6c. The U« So Chiefs of Staff further propose that 8 so far as 
practicable e comparable British and Uo So cipher rna chines us® 
physically interchangeable rotors 0 The 7' a, rotor BCM rotors are of 
the same size as those in the CCK (CSP 1700 ) 0 Suoh standardisation 
would permit emergency issue of rotors by either country to the 
other, if necessary o 

7o If the UoS q «=>U.Ko agree on the 7~rotor BCM (PCM) as the 
new combined cipher machine,, the U 0 K 0 would not have to undertake 
extensive time-consuming development work, and c if desired, could 
probably expedite procurement by combining procurement orders 0 
It is anticipated that the replacement date (1 January 1955) can 
be met if the 7~rotor BCM (PCM) is agreed upon as the replacement 
for the COM; the 7«rotor BCM (PCM). would be less complex in con- 
struction than the proposed British machine „ and most of the parts 
have already proven satisfactory in actual ua© 0 
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ENCLOSURE "3” 

FACTS BEARING Oil THE PROBLEM AND DISCUSSION 
I* While this paper pertains to U.S. -U.K. communications, it should 
be understood that the combined cipher machine to be agreed upon for 
U.So«»UoK» communications may later have to be made available for use 
also by allied British Dominions, especially Canada, and possibly also 
by other allied countries. 

2. In JCS 2074, one of the conclusions of the U.S. Joint Chiefs of 
Staff was® "the release of the ECM under present circumstances is not 
warranted*" Instead, JCS 2074 proposed, for combined use, a U.S. 
machine, the 5 -rotor BCM. This machine was subsequently disclosed to 
the British and rejected on the grounds that a 5-rotor cipher machine 
would not be sufficiently secure as a long-term solution. 

3* In RDC 5/99 dated 13 July 1949, the British Chiefs of Staff 
continued to express concern regarding the security of the present 
combined cipher machine on a long-term basis and stated: 

That they had decided to replace their main cipher machine 
(TYPEX) as soon as possible. 

b. That they felt it necessary to have a single machine which 
would be able to provide both intra-British communications and 
combined U.S. ^British communications, 

£. That they requested the U.S. Chiefs of Staff to authorise 
the disclosure to the U.K. cryptographers of the principles and 
details of the ECI-I so that these might be incorporated in the 
contemplated new British machine. 

4. In JCS 2074/2 dated 10 January 1950, the U.S. Chiefs of Staff 
denied the British request for principles and details of the ECM® 
but indicated txvo possible alternative solutions: 

a. Solution A. Disclosure by the U.K. of a copy of its con- 
templated new cipher machine, or detailed drawings thereof, so 
that the U.S. could ascertain the feasibility of constructing 
an adaptor for U.S. use which would provide the basis for secure 
combined communications by utilizing the new British machine, 
when available, and an existing U.S. machine with an adaptor. 
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b. Solution B. The possibility of using a 7-rotor BGM which 
the U»8. was developing. 

These alternative solutions are discussed in paragraphs 5 and 6 
below* 

5. SOLUTION A : 

a* The drawings of the contemplated new British cipher machine 
(Enclosure to JCS 2074/4 dated 13 April 1950) have been received 
and confirm the statement of the British Chiefs of Staff in 
Para. 6(b) of RDC 1/36 (Enclosure to JCS 2074/1, dated 6 December 
1949) that the new British machine would be built to operate on 
the broad principles of the ECM. 

b. The British security evaluation of their contemplated new 
machine is sound; the resistance of the machine to cryptanalysis 
should be at least as great as that of the ECM and hence would 
• be adequately secure for highest-level communications® 

£. It can be deduced from the drawings that the U.K. has not 
yet built a working model of the new British machine 9 and, there- 
fore, while the U.K. still has full latitude in the determination 
of certain details of basic construct5.cn, it is several years 
away from the procurement stage. 

d a Although the contemplated new British machine will embody 
the basic principles of the ECM, there are significant differ- 
ences in detailed application of the ECM principles. As a 
consequence, in order to make the two machines intercommunicable, 
it would be necessary far the U.S. to -provide the British with 
certain detailed information applicable specifically to the ECM. 

e. The provision to the British of detailed information about 
the ECM would not be necessary for the use of their newr machine 
for purely British intra-communication. 

f . If the British are provided with required detailed ECM 
information, the security of the resulting combined system would 
be of the same high order as that of the ECM. 

jj. As regards the effects on our own communi cation security, 
of the disclosure to the British of the detailed information 
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referred to above, there probably would be no change in the secur- 
ity evaluation of the jtuCM. Although the U.S. has always empha- 
sized the importance of the physical security of our cipher machines 8 
our evaluation of the ECU is predicated on possible ultimate enemy 
possession of the ECM machine 8 and our security is based upon 
regularly changing the rotors and key lists* The privacy of U.S. 
communications against cryptanalytic attack by any foreign power, 
including the British, could be assured. 

ho If the British were to include in their new machine approp- 
riate wiring, based on detailed ECK information supplied by the 
U.S., security fcr intra-British communications would not be af- 
fected, and if certain special rotors were used by them, a rela- 
tively simple method of use of the ECM by the U.S. with one 
special rotor per machine would permit inter-communication between 
the proposed new British machine and the U.S. machine. 

jl. The cost to the U.S. of the adoption of this solution would 
be less than $1,000,000 and an existing U.S. nachine (ECM) could 
be used fcr U.S.-U.K. combined communications. 

j. Present U.S. procedure in the use of the ECM could remain 
unchanged, except for use of a special adaptor rotor. 

k. The UoK. would have to use at least four special adaptor 
rotors, which would very slightly reduce the security of the 
British machine, but not sufficiently to cause any concern. 

l. The great disadvantage of Solution A would be the loss of 
the full control of the ECM which we have always regarded as 
vitally important to the U.S. 

6. SOLUTION B : 

a. A model of the 7-rotor BCM is now available and can be 
shown to the British experts in Washington with a view to hold- 
ing discussions regarding its adoption for combined communica- 
tions. In this connection, certain points should be considered — 
namely: 

(1) The British desire to provide but one cipher machine 
for their own internal use as well as for combined use. 
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(2) We can adapt the LCI-I to work with the 7 -rot or BCR, and 
the 7-rotor BCR to work with the present CCM. The present CGII 
will probably be in use Tor several years to come — even 
though the U.S* and U.K. replace the present CCK for combined 
U»S.~U«K. use. 

(3) A 7-rotor BCR should assure the U.S.-U.K. of the highest® 
level communications security on a long-term basis* 

b. JCS 2074 stated that the means and methods employed for the 
protection of U.S* communications constitute a private matter not 
to be shared in toto with any other government, and that the U*S. 
must reserve for itself a cipher equipment of assured security to 
provide privacy for its own communications. Although it is now 
clear that the British understand the basic important principles 
of our ECM, and intend to incorporate them in their new machine, . 
they lack important specific information concerning applications 
of these principles. As a matter of National policy, it is 
therefore considered proper not to disclose further details of 
the ECM to any foreign country. 

Co Continuation of this policy appears desirable for the 
reason that by sharing the ECK, we lose much of the existing 
full control over this vital machine. Such full control: 

(1) Permits us to enforce measures to insure the physical 
security of all elements of the machine against loss or com® 
promise, by limiting distribution and prescribing adequate 
safeguards. 

(2) Permits us full freedom to apply modifications when 
desired to enhance our communication security. 

(3) Affords us maximum assurance that no foreign nation 
that might try to read our messages will have possession of 
one of our machines, which possession might permit a more 
direct attack (by cryptanalysts) by revealing details or 
modifications not already known. However, our cryptanalysts 
believe that such attack would not be successful unless the 
foreign nation concerned possessed also our rotors and key 
lists, which are regarded as more vital security elements 
than the machine chassis. 






do Experience to date indicates that neither the British nor 
the U.3. can develop^ refine and produce a reliable c omple t e ly *=ne w 
cipher machine in less than five years 0 Therefore,, the U.b© will 
probably have to offer the 3ritish a U.S ©“developed cipher machine 
if the target date of 1 January 1955 3 . which has been agreed upon as 
the replacement date for the present CCM„ is to be meto 

e© It is believed that the British,, when shown a working model 
of the relatively less complex but highly secure 7*=rotor BCM# will 
abandon their own proposed development and will accept the 7 *rotor 
BCI-I as the replacement for the present COM as well as for their own 
intra^Briti sh useo It can surely be refined and produced in less 
than five ( 5 ) years,, if funds therefor are provided,, (approximately 
£6„000 S 00G for the U.S«) because most of the parts have already 
proven satisfactory in actual use 0 

fo In addition to the problem of improving the security of 
highest “level combined communications,, there is the current 
problem of providing improved e adequately<=*secure crypto systems 
for U.3o and U„K» operating force use ? especially in; 

(1) Merchant ships 0 

(2) Amphibious craft « 

(3) Submarine So 

(4) Patrol craft o 

go Since 1944 the U.S. Navy has had under development a small 
lightweight cipher machine (the PCM) to fill Navy requirements© 

The PCH will be cryptographically identical with the T^rotor BCM S 
and should be suitable for large and small ships © It is expected 
that the first development model of the PCM will be completed 
about November 1950© Both the PCM and 7®rotor BCI-i will have pro® 
vision for int er coran unicating with the present COM and ECM© 
ho The logistical problem of secure combined communications 
is of much greater magnitude and complexity for the Navies co n® 
cerned than for the respective Armies and Air Forces 0 For ex=> 
Sample, during l/orld War II „ the U.S© Navy procured and used 
about 15 times as many CCMs as the U.S© Array and Air Force 
combined,, even though the COM distribution was limited to 
"Major T .var Vessels" (destroyers and larger } 0 





7* ffAQ-TS ,APPLICA.&tt TO BOTH SOLUTION A AND SOLUTION B : 

a. A wachine of improved security would have to be issued to 
those U.S. commands fro a whom the ECU was withdrawn in 1947 in 
sensitive overseas areas. 

b«» The effect upon the communication intelligence interests 
of the U.S. either during the present world situation or during 
actual hostilities, would be the same. If used by a foreign 
country, either proposed machine, for all practical purposes, 
would be unbreakable by the U.S. 

c. Experience has demonstrated that the emergency issue of 
rotors by one country to the other is of considerable practical 
value. If British machines are designed to use the same sise 
rotors as thoso used in comparable U.S. machines, such emergency 
issue would be greatly facilitated. 

do Although the cost to the U.S. in solving the immediate 
high level combined problem would be substantially larger under 
Solution B, the total over-all cost to the U.S. Government (par- 
ticularly because of the special Naval requirements referred to 
in Paragraph which are combined as well as intra-U.S. Navy 

requirements) would be essentially the same under either solution. 
This total cost cannot be closely estimated pending completion of 
certain cipher 1 projects still under development . 

e. The U.S. has already agreed that, if . necessary, we will 
provide the British with a limited number of adequately-secure 
cipher machines (from U.S. stocks) to meet an emergency situation 
which might arise before 1 January 1955 when the replacement COM 
is to be available. YJhich U.S. machine this will be depends upon 
the then -existing circumstances. 
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